Script Generator Intl
v1.0.0generate topic or brief into multilingual video scripts with this skill. Works with TXT, DOCX, PDF, MP4 files up to 200MB. marketers use it for generating vi...
⭐ 0· 22·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (multilingual video/script generation) matches the runtime instructions: the skill talks to a nemo video rendering API, uploads media, creates render jobs, polls for results, and returns a download URL. Requesting a NEMO_TOKEN (service credential) is appropriate for this purpose.
Instruction Scope
Instructions explicitly call external endpoints at mega-api-prod.nemovideo.ai, upload user files, create sessions, and use server-sent events. These actions are within the declared purpose, but they mean user files (TXT/DOCX/PDF/MP4) and prompt text are transmitted to a third-party cloud service. The instructions also ask the agent to detect its install path and refer to a config directory, which requires reading local paths—minor scope creep but explainable by header attribution and session logic.
Install Mechanism
This is an instruction-only skill with no install spec or code to fetch/execute. That is the lowest installation risk.
Credentials
Only one credential, NEMO_TOKEN, is declared as required and is the primary credential — appropriate for a cloud API. The SKILL.md also contains logic to obtain an anonymous token via the service's anonymous-token endpoint if NEMO_TOKEN is absent; this behavior is coherent but means the skill can create and use a transient token without an existing user token. The SKILL.md frontmatter references a config path (~/.config/nemovideo/) which the registry metadata did not declare — this mismatch should be clarified, since reading that path could expose stored tokens or config.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform-wide privileges. It does instruct reading install paths for header attribution, but it does not request persistent system-wide modifications or other skills' configs.
Assessment
This skill will send any uploaded files and your prompt text to a third‑party rendering service (mega-api-prod.nemovideo.ai). Before installing or invoking it: (1) Do not upload sensitive or confidential documents unless you trust that service and its privacy/retention policy. (2) Understand that the skill will try to use NEMO_TOKEN from the environment, and if none is present it will request an anonymous token from the service automatically (creating a transient token with limited credits). (3) Note a metadata mismatch: the SKILL.md mentions a config path (~/.config/nemovideo/) that the registry did not list — confirm whether the skill will read that directory (it could expose saved tokens). (4) If you proceed, test with non-sensitive files first and prefer providing your own NEMO_TOKEN only if you trust the provider. If you need higher assurance, ask the publisher for source code or a privacy policy and confirm the exact filesystem accesses the skill will perform.Like a lobster shell, security has layers — review code before you run it.
latestvk97fsm3vnb9xzwhgqqv8x9qjss851x21
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN